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(57) A scrambler(1) includes a PN1 n selector(3) for 
selecting one pseudo-random signal PN1 n from a pre- 
determined plurality of pseudo-random signals based 
on an input scramble key n, a spectrum shaper(5) for 
shaping the spectrum of the selected pseudo-random 
signal PN1 n , an adder(7) for adding the spectrum- 
shaped PN1 n to an audio signal, a PN2 n generator(9) 
for generating a pseudo-random signal PN2 n based on 
the scramble key n, and a scrambling circuity 1) for 

FIG. 2A 



scrambling the audio signal based on the pseudo-ran- 
dom signal PN2 n . A descrambler(31) includes a PN1 n 
detector(33) for detecting PN1 n embedded into the 
audio signal and for outputting the scramble key n, a 
PN2 n generator(35) for generating the pseudo-random 
signal PN2 n based on the scramble key n, and a 
descrambling circurt(37) for descrambling the audio sig- 
nal based on the pseudo-random signal PN2 n . 
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Description 

BACKGROUND OF THE INVENTION 

s 1 . Technical Field of the Invention 

[0001] The present invention relates to a scrambler and a descrambler for protecting a copyright of the contents of 
audio or video information or the like suitable for use in cable/radio signal distribution systems, disk recording/reproduc- 
ing systems, DVD apparatuses, etc.. and a recording medium for recording scrambled signals thereon. 

10 

2. Description of Prior Art 

[0002] Along with the progress of digital technology in recent years, there have been widely diffused CD's. DVD's and 
digital VTR's recorded with audio and/or video signals. Since digital transmission and digital recording technologies 
is have excellent characteristics that digital information is transmitted or recorded in high quality, that information error can 
be corrected automatically and that there involves no deterioration in the quality of the information, it has been desired 
to protect a copyright of the contents of the information and to permit disclosing of the information by attaching using- 
conditions thereto. 

[0003] For this purpose, there exists a scrambling technique for hiding the contents of the information against unjust 
20 or illegal listening to the contents or illegal use of data. In this technique, an audio signal or a video signal is shuffled for 
each bit or for each sample by using a pseudo-random signal, or a random signal is applied to the audio or video signal 
to scramble the signal, to thereby hide this signal or convert this signal into a noise signal. 

[0004] This pseudo-random signal is a signal having statistical characteristics simitar to a random signal, and is gen- 
erated by means of a generation method which is mathematically or theoretically recursive, based on scramble key 
25 data. For the purpose of descrambling data scrambled by the pseudo-random signal, the scramble key data is transmit- 
ted or recorded by being sufficiently protected in a hidden state in a recording format together with an audio or video 
signal. At the signal receiving side or the reproducing side, only an authenticated apparatus can decode the scramble 
key to descramble the scrambled signal. 

[0005] If an apparatus not authenticated tries to reproduce the signal, the signal cannot be descrambled. and only a 
30 noise signal or an extremely fowled signal is obtained. Therefore, it is possible to protect the contents of the transmitted 
or recorded signal. 

[0006] It is preferable to keep a scramble key separate from scrambled data, from the standpoint of safety. However, 
this requires a provision of a transmission path for the key in addition to a data transmission path, which complicates a 
system structure. Therefore, in general, a scramble key and scrambled data are transmitted or recorded at the same 
35 time. In this case, some encryption is often conducted to hide the key as far as possfole. 

[0007] In the case where scrambled data and a key for descrambling the data are transmitted or recorded together at 
the same time as described above, there exists a difficulty in that it is easy to separate the scrambled data from the 
scramble key in the format so that the key can be easily stolen by an attacker. 

[0008] In the mean time, there is available a watermarking technique for use in embedding into a signal a copy pro- 
40 tection flag (CGMS) for protecting a copyright The watermarking technique is also called a digital watermarking tech- 
nique. A prior-art example of the application of the watermarking technique to an audio signal will be explained below 
with reference to Fig.1 . 

[0009] Information to be embedded into an audio signal is diffused into an audio signal spectrum by a spectrum drf- 
fuser 101. The spectrum is shaped by a shaper 1 05 for utilizing auditory characteristics, and the shaped signal and the 
45 audio signal are added together by an adder 107. The spectrum diffusion is carried out in short by applying a pseudo- 
random signal generated by a PN generator 103 to the information to be embedded to make the information a noise 
signal diffused in a wide area. In adding a shaped signal to an audio signal, the shaped signal is always set at a level 
lower by a predetermined value than the level of the audio signal spectrum. 

[0010] With the above-described arrangement there arises almost no howling at the time of listening to the audio 
so information due to a masking effect For detecting the embedded information, a pseudo-random signal which is the 
same as the pseudo-random signal used for the embedding is generated by a PN generator 113. Then, a correlation 
coefficient between this pseudo-random signal and a received signal or a reproduced signal is calculated by a correlator 
111, and data is discriminated by a data discriminator 115. 

[0011] In the calculation of a correlation coefficient an audio signal works as noise. Accordingly, in order to secure 
55 an S/N ratio having sufficient reliability, a sufficiently enough integration tim is necessary. An example of an expression 
for obtaining a correlation coefficient is shown in (1) below. 
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Oor.«2!^(n).P(n) 



(1) 



5 where 



Cor.: 
A(n) 
P(n) 



a correlation coefficient, 
an audio signal, and 
a pseudo-random signal. 
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[0012] If, an embedding level is lower by 30dB than an audio signal level and if an S/N ratio of 20dB is necessary as 
a correlation coefficient, for example, a gain of 50 dB is necessary by integration. Accordingly, a value of N which sat- 
isfies an expression (2) below becomes N = 100,000. Thus, an audio signal is necessary by the number of 100,000 
samples. 



[001 3] A flag for indicating whether a pseudo-random signal exists or not has a size corresponding to one bit There- 
fore, under the above embedding/detecting conditions, it requires at least two seconds to detect this one bit assuming 

20 a sampling frequency is 48 kHz. In general, a CGMS flag for indicating a permission or non-permission of copying has 
two bits, and it has been considered to have no problem if it takes several tens of seconds for detecting this flag. 
[0014] A CGMS flag embedded into a signal in this way in a transmitting apparatus or a recording apparatus needs 
not be transmitted by separate means, and the CGMS flag still exists in the form of an analog signal. Therefore, the 
CGMS flag transmission by this method can be controlled much more securely than the transmission according to the 

25 prior-art method. 

[0015] However, generally, it takes long time for embedding key information of a few bits into data by the spectrum 
diffusion technique. In other words, there has been a problem that if it takes a few seconds to embed one-bit information 
as described above, it requires m times longer time to embed m-bit key data. 

[0016] It may also be considered possible to embed a plurality of bits at the same time. However, a pseudo-random 
30 signal embedded at the same time becomes noise in an audio signal, which results in a substantial deterioration of 
sound quality. 

SUMMARY OF THE INVENTION 

35 . [0017] In the light of the above-described problems, rt is an object of the present invention to provide a scrambler and 
a descrambler capable of more safely transmitting a scramble key and also requiring no special transmission path for 
transmitting a scramble key. 

[0018] More particularly, it is an object of the present invention to provide a scrambler that embeds a scramble key 
into data by a spectrum diffusion technique and scrambles the contents of an audio signal or a video signal by using 

40 the scramble key. and a descrambler that descrambles the contents of this signal. 

[0019] It is another object of the present invention to provide a scrambler and a descrambler that can embed a few 
bits as a scramble key and that does not take a long time for embedding/detection of the scramble key. 
[0020] It is still another object of the present invention to provide a recording medium having scrambled thereon the 
contents of an aucfio signal or a video signal by a scramble technique that is strong against an attack for obtaining a 

45 scramble key and that does not require a long time for detecting the scramble key. 

[0021 ] In order to achieve the above objects, there is provided a scrambler, comprising: selecting means for selecting 
a f irst pseudo-random signal from a predetermined plurality of pseudo-random signals based on input key data; embed- 
ding means for embedding the first pseudo-random signal into an input data signal; pseudo-random signal generating 
means tor generating a second pseudo-random signal based on the key data; and scrambling means for scrambling the 

so input data signal by the second pseudo-random signal generated. 

[0022] According to a preferred embodiment of the present invention, the embedding means embeds the f irst pseudo- 
random signal into the input data signal by means of spectrum diffusion. 

[0023] Further, in order to achieve the above objects, there is provided a descrambler, comprising: pseudo-random 
signal detecting means for detecting, as a first pseudo-random signal, one pseudo-random signal from a predetermined 
55 plurality of pseudo-random signals, embedded into an input data signal; key data generator for generating key data 
which is information on the first pseudo-random signal; pseudo-random signal generating means for generating a sec- 
ond pseudo-random signal based on the key data; and descrambling means for descrambling the input data signal by 
the second pseudo-random signal generated. 
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[0024] According to a preferred embodiment of the present invention, the descrambler further comprises reference 
pseudo-random signal generating means for generating a plurality of reference pseudo-random signals, wherein the 
pseudo-random signal detecting means detects the first pseudo-random signal based on calculation of correlation coef- 
ficients between the plurality of reference pseudo-random signals generated by the reference pseudo-random signal 

5 generating means and the input data signal. 

[0025] Further, in order to achieve the above objects, there is provided a recorcfing mecfium having recorded thereon 
a data signal into which a first pseudo-random signal selected from a predetermined plurality of pseudo-random signals 
based on input key data has been embedded, said data signal also having been scrambled by a second pseudo-ran- 
dom signal generated based on the key data 

w [0026] Further, accord ng to the present invention, by further embedding into the data signal a predetermined third 
pseudo-random signal having a predetermined phase relationship with the phase of the first pseudo-random signal at 
the scrambler side, it is possible to detect at high speed the f irst pseudo-random signal at the descrambler side through 
a phase detection of the third pseudo-random signal. 

[0027] The nature, principle and utility of the invention will become more apparent from the following detailed descrip- 
75 tion when read in conjunction with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0028] In the accompanying drawings: 

20 

Fig. 1 is a schematic view for explaining embedding and detection according to a prior-art watermarking technique; 
Figs.2A and 2B are a block diagram and a scramble conceptual view respectively for showing a principle of a 
scrambler and a descrambler relating to the present invention; 

Fig.3A is a block diagram for showing a configuration of a scrambler and a descrambler in a first embodiment of the 
25 present invention; 

Fig.3B is a conceptual view for showing embedding and scrambling in the scrambler in the first embodiment; 
Rg.4 is a detailed block diagram for showing a key part of the scrambler according to the first embodiment; 
Fig.5 is a flowchart for explaining an operation the descrambler according to the first embodiment; 
Fig.6 is a flowchart for explaining an operation the descrambler according to the first embodiment; 
30 Fig.7 is a view for explaining a flow of a processing time of the descrambler according to the first embodiment; and 
Fig.8 is a conceptual view of embedding and scrambling in the scrambler and the descrambler according to a sec- 
ond embodiment of the present invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

35 .._ . ,.. . 

[0029] Embodiments of the present invention will be explained in detail below with reference to the accompanying 
drawings. 

[0030] Figs.2A and 2B are a block diagram and a principle explanatory view respectively showing a schematic con- 
figuration of a scrambler and a descrambler for explaining the principle of the present invention. A digital audio signal 
40 (hereinafter, to be simply referred to as an audio signal) is explained as an example of the contents of a signal to be 
scrambled, but the contents are not limited to this. 

[0031] Referring to Fig.2A, a scrambler 1 includes a PN1 n selector 3 for selectively outputting a first pseudo-random 
signal PN1 n from a predetermined plurality (N) of pseudo-random signals PN1 0 to PNI^ according to a scramble key 
n given from the outside, a spectrum shaper 5 for shaping the spectrum of PN1 n at a level lower by a predetermined 
45 value the level of the spectrum of an audio signal, an adder 7 for adding an output of the spectrum shaper 5 to the audio 
signal, a PN2 n generator 9 for generating a second pseudo-random signal PN2 n based on the scramble key n, and a 
scrambling circuit 1 1 for scrambling the audio signal based on the PN2 n . 

[0032] The audio signal into which PN1 n has been embedded and which has been scrambled by the scrambler 1 , is 
received or reproduced by a descrambler 31 through a transmission path or a recording medium shown by a reference 
so number 21. 

[0033] ft is considered suitable to use a cable or radio transmission path or a broadcasting channel as the transmis- 
sion path and a CD, or a DVD or a digital video tape or the like as the recording medium shown by the reference number 
21. 

[0034] The descrambler 31 includes a PN1 n detector 33 for detecting the pseudo-random signal PN1 n embedded into 
55 the audio signal and for outputting the scramble key n corresponding to the detected pseudo-random signal, a PN2 n 
generator 35 for generating the pseudo-random signal PN2 n based on the scramble key n, and a descrambling circuit 
37 for descrambling the audio signal based on PN2,,. 

[0035] The principle of the embedding and scrambling will be explained next with reference to Figs. 2A and 2B. At 
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first an audio signal to be scrambled is divided into two parts; a non-scrambling period part at the header, having a few 
seconds, for example, and a scrambling period part after the non-scrambling. During a non-scrambling period, PN1 n 
selected by the PN1 n selector 3 and then spectrum-shaped by the spectrum shaper 5, is spectrum-diffused and is 
embedded into the audio signal by the adder 7. 

s [0036] During a scrambling period, the audio signal is scrambled by the scrambling circuit 1 1 based on PN2 n gener- 
ated by the PN2„ generator based on the scramble key n. As a scrambling method to be used by the scrambling circuit 
1 1 , there may be employed a one which has been known conventionally. The method is not specifically limited, and it 
is possible to use, for example, a method for shuffling the audio signal for each bit or for each sample or for directly 
applying a pseudo-random signal to the aucfio signal. 

w [0037] In the descrambler 31 provided at the signal receiver side or a reproducer side, at first, the PN1 n selector 33 
detects PN1 n embedded into the audio signal during the non-scrambling period of the aurio signal, and the PN2,, gen- 
erator 35 generates PN^ based on the scramble key n corresponding to PN1 n output by the PN1 n detector 33. Then, 
the descrambling circuit 37 descrambles the audio signal during the scrambling period part based on PN2 n . 

75 [First embodiment) 

[0038] Fig.3A is a block diagram for showing a first embodiment of a scrambler and a descrambler relating to the 
present invention. Fig.3A is different from Fig.2A in that a fixed pseudo-random signal as a third pseudo-random signal 
is added to the input of the spectrum shaper 5 of the scrambler 1 and that the PN1 n detector 33 of the descrambler 31 

20 is replaced by a Pna/PN1 n detector 39. All the other structures are the same. 

[0039] Fig.3B is a conceptual view for showing embedding for carrying out scrambling and scrambling in the first 
embodiment of the invention. As shown in this drawing, there is provided a non-scrambling period part in the header of 
an audio signal, and the third pseudo-random signal PNa and the first pseudo-random signal PN1 n are embedded into 
this part during the non-scrambling period. A scrambling period part following this non-scrambling period part is scram- 

25 bled based on the scramble key n shown by PN1 n . 

[0040] The operation of the first embocfi merit will be explained next 

[0041 ] At first, the scrambler 1 embeds the third pseudo-random signal PNa and the first pseudo-random signal PN1 n 
into the audio signal based on a spectrum diffusion technique. 

[0042] The third pseudo-random signal PNa is a flag for indicating whether or not a scramble key has been embedded 
30 into the audio signal, and this is a predetermined fixed pseudo-random signal. On the other hand, the first pseudo-ran- 
dom signal PN1 n is one pseudo-random signal PN1 n selected by the PN1 n selector 3 from a predetermined plurality (N) 
of pseudo-random signals PN1 0 to PN1 N -i- 

[0043] In this case, the length of the third pseudo-random signal PNa is set equal to the length of the first pseudo- 
random signal PN1 n , or these lengths are set in a certain integer ratio. Further, in embedding these pseudo-random sig- 

35 nals, the phases of PNa and PN1 n are set the same or are set to have a predetermined phase relationship. . 

[0044] To each of the predetermined N pseudo-random signals PN1 0 to PN1 N . 1( N scramble keys 0 to N-1 are set to 
correspond in one to one relationship. For example, a scramble key n, as one of these scramble keys, corresponds to 
PN1 n . This indfirectJy means that the selecting of one pseudo-random signal PN1 n from the N pseudo-random signals 
PN1 o to PN1 and embedding this signal as the first pseudo-random signal into data for transmission or for recording 

40 is to embed the scramble key n corresponding to PN1 n for transmission or for recording. 

[0045] Then, the audio signal after the embedded period is scrambled by this scramble key n. There are various meth- 
ods of scrambling. For example, there is used the scrambling circuit 1 1 for making the PN2 n generator generate a sec- 
ond pseudo-random signal PN2 n based on the scramble key n to shuffle the audio signal by this pseudo-random signal 
PN2 n , or to scramble the audio signal by this pseudo-random signal PN2 n . 

45 [0046] The audio signal becomes a noise signal by the scrambling, and it is difficult to listen to this audio signal unless 
this is desoambled. Thus, the contents of the aucfio signal can be hidden. The scrambled audio signal embedded with 
the scramble key is recorded onto a record ng medium or is transmitted through a transmission path. 
[0047] In the descrambler 31 , the scramble key n embedded into the audio signal is detected at first. For detecting 
the scramble key n, at first, there is detected the fixed pseudo-random signal PNa as the third pseudo-random signal 

so for showing whether a scramble key has been embedded or not The audio signal and assumed PNa are correlated to 
detect the fixed pseudo-random signal PNa. 

[0048] Since PNa has been embedded at a level lower than the audio signal level, it is necessary to integrate over a 
sufficiently long time in order to carry out a satisfactory and reliable detection, ft usually takes a few seconds for this. 
Further, it is also necessary to detect the phase of the embedded PNa since this phase is not known. For this purpose, 
55 correlation coefficients of all the conceivable potential phases are detected, and a phase with the highest correlation 
coefficient is established as the phase of PNa. 

[0049] Once the phase of PNa has been established, PN1 n is detected. In this case, when the phase of PNa is known, 
the phase of PN1 n is also known based on the conditions set at the time of the embedding. Therefore, in the detection 
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of PNIn, a processing for phase establishment is not necessary. However, since n of PN1 n is unknown, it is necessary 
to correlate each of the potential N pseudo-random signals PN1 0 to PNH^. When the length of PN1 is expressed as 
M, and if M is equal to or larger than N, it is possible to detect PN1 n in a sufficiently shorter period than to detect PNa. 
In fact if the scramble key has a length of 8 bits, then N is equal to 256. 

5 [0050] In the mean time, for the length M of PNa and PN1 n , it is necessary to take a sufficiently large value at which 
these pseudo-random signals can be separated with sufficiently high reliability from the audio signal into which they 
have been embedded. Accordingly, it is necessary to select the length of M at as large value as possible which makes 
it possible to sufficiently lower error probabilities of making an erroneous decision that the audio signal is PN. On the 
other hand, since the number of phases increases, the phase detecting time increases. By taking a balance between 

io the error probabilities and the phase detecting time, the value of M is taken at a level of at least a few thousands. 
[0061] Accordingly, the relationship of M » N can be met sufficiently. As explained above, PNa is used as a flag for 
discriminating whether there exists a scrambling or not and is also used for a synchronous detection of the scramble 
key n, and thus PN1 n is used as information carrier of the scramble key n. 

[0062] Fig.4 is a detailed block diagram of the PNa/PN1 n detector 39 for explaining a more detailed scramble key 
is detection. In this diagram, the PNa/PN1 n detector (hereinafter to be called a PN detector) 39 includes a register 51 
structured by shift registers of the length M, an adder 53 for adding an input signal and an output of the register 51 
together and outputting the sum to the register 51, a PN generator 55 for generating PNa and PN1 0 to PNI^^ a cor- 
relator 57 for calculating a correlation between an output of the register 51 and an output of the PN generator 55, and 
a correlation controller 59 for carrying out an overall control of the PN detector 39 and a control of PN generated by the 
20 PN generator 55. 

[0063] In detecting a pseudo-random signal embedded into a transmitted or recorded signal, it is necessary to obtain 
correlations of all the potential phases if the phase of the pseudo-random signal is not known. Therefore, the length of 
the pseudo-random signal is preferably as small as possible. On the other hand, the pseudo-random signal to be 
embedded needs to have a sufficiently large length in order to carry out a calculation for obtaining a correlation over 
25 such a long time as a few seconds. Therefore, a pseudo-random signal of a constant length (M) is repeated in actual 
practice. 

[0054] In the detection, the signal is once convoluted in the length of M before carrying out a phase detection, by uti- 
lizing the periodicity of the pseudo-random signal, and the convoluted signal is stored in the register 51 having the 
length M. At this time, the level of the embedded signal is reinforced by the periocficity relative to the aucfio signal. The 
30 phase detection is carried out for M sample signals stored in the register 51 . M samples A(m) are read out sequentially 
from the register 51 , and pseudo-random signals P(m) to be detected are output sequentially from the PN generator 55. 
Then, basically, a correlation coefficient Cor. shown in the following expression (3) is obtained. 

M-1 

35 „ „ Cor.= ]g A(m) • B(m) (3) 

m=0 



[0055] After the convolution, the pseudo-random signal PNa is detected. However, since the phase is not known yet, 
40 it is necessary to obtain correlations of all of M phases corresponding to the length M. Therefore, an expression (4), in 
which the phases of any one of A(m) and P(m) are shifted (A (m) in this case), is carried out. 

M-1 

Cor.(k) = £ A{m+k) • P{m) (*=0,1, • • • ,M-1) (4) 

45 m=0 



[0056] In the above expression, A(m+k) means to read the samples by shifting the calling from the register 51 by k 
sanrples. Cor.(k) having the highest correlation coefficient among Cor.fk) (k = 0 to M-1) is obtained, ff the obtained cor- 
so relation coefficient is the one which is sufficiently reliable to indicate that there exists a pseudo-random signal, there 
actually exists the pseudo-randan signal to be obtained, and k denotes a phase of the pseudo-random signal. Thus, 
the existence of PNa is confirmed and the phase k thereof is detected. 

[0057] Next PN1 n is detected. In the register 51 . both PNa and PN1 n are stored together in convolution. Therefore, 
correlation coefficients are obtained again between the signal called from the register 51 and the N pseudo-random sig- 
55 nals PN1 j Q = 0 to N-1). Since the phase k of PNa is known already, k is fixed, and the PN generator 55 generates PN1 j. 
Thus, correlation coefficients are obtained by the following expression (5). 
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M-1 

Cor.(j)= 2,A(m+k)'Pj(m) ;=0,1.« • '.AM (5) 

m=0 

s [0058] PN1j Q = 0 to N-1) are generated sequentially based on the above expression, and respective correlation coef- 
ficients Cor.Q) are obtained. Since j which makes a correlation coefficient Cor.Q) maximum is equal to n, the embedded 
PN1 n can be detected. The decision of a correlation coefficient, the control of the PN generator 55 and the calling from 
the register 51 are all controlled by the correlation controller 59. 

[0059] Based on the above-descrfoed operation, n is output as a result of the detection. This n can be used directly 
10 as a scramble key, or it is also possible to obtain a separate scramble key with some conversion based on this n, for 
increasing the level of secrecy. 

[0060] The PN generator 55 must generate PNa and PN1 0 to PN1 N -v These pseudo-random signals can be stored 
in advance in a memory or the like and are then called. However, since the PN series can be generated by calculation 
from short data (an initial value of the M series, for example) which becomes a seed, it is general that only short seed 

15 data is held by a required number. 

[0061] Fig.5 is a flowchart for explaining the operation of a phase detection. In Fig.5. at first, a reception signal or a 
reproduction signal during a non-scrambling period is added in circulation by shifting circularly the register 51 having 
the length M to carry out convolution. A result of the convolution is held in the register 51 (step S101). 
[0062] Next, initialization is carried out for starting calculation. In this case, a read control parameter (digit) of the reg- 

20 ister is set m, a variable for obtaining the phase of PNa is set k, and a memory area for M correlation coefficients Cor.(k) 
(k = 0 to M-1) is set Cor.(k), and these are all set at an initial value of "0" (step S103). 

[0063] Next A(m+k) is read out for each one sample from the register 51 (step S1 05), and P(m) which is each element 
signal of the PNa is generated from the PN generator 39 (step S107). The steps S105 and S107 may be earned out at 
the same time or may be carried out in an opposite order so long as both values can be supplied to the next step S109. 

25 [0064] Next, Cor.(k)+A(m+k) * P(m) is calculated, and a result is stored in Cor.(k) (step S1 09), the register read con- 
trol parameter m is incremented by 1 (step S1 1 1), and a decision is made as to whether all the samples have been read 
out to the last sample (step S1 13). If the decision in the step S1 13 is NO, the operation is repeated from the step S105. 
[0065] If the decision in the step S1 13 is YES, the calculation of the correlation coefficient Cor.(k) corresponding to 
the phase k has been finished, and k is incremented by 1 (step S1 15). Then, a decision is made as to whether k has 

30 reached M or not (step S1 1 7). H k is not equal to M, there is or are still other correlation coefficients to be obtained, and 
the process branches to step S1 05. 

[0066] If k is equal to M, all the correlation coefficients have been obtained, and a maximum Cor.(k) and the value of 
this k are obtained from Cor.(0) to Cor. (M-1) (step S1 19). Then, a decision is made as to whether the obtained Cor.(k) 
is larger than a predetermined decision value (step S121). H this Cor.QQ does not exceed the predetermined decision 
35 value, the process branches to ERROR processing because some fault is considered to have occurred. In the ERROR 
processing, retrial may be carried out by a predetermined number. 

[0067] If this Cor.(k) exceeds the predetermined decision value, PNa is detected correctly, and the phase of PNa is 
made firm as the k obtained in the step S1 19 (step S123), thus finishing the processing. 
[0068] Fig.6 is a flowchart for explaining the operation for detecting PN1 n . 
40 [0069] At first, values of m, Q) and j are initialized asm = 0, Q) = 0Q = 0to N-1), and j = 0, in the state that the value 
of k for showing the phase of PNa and the value of the register 51 are held (step S201). In this case, a convoluted signal 
remains in the contents of the register 51 . 

[0070] Next, A(m+K) is read for each one sample from the register 51 (step S203), and Pfim) which is each element 
signal of the pseudo-random signal PN1 j is generated from the PN generator 39 (step 5205). The steps S203 and S205 
45 may be earned out at the same time or may be carried out in an opposite order so long as both values can be supplied 
to the next step S207. 

[0071] Next, Cor.Q) + A(rmk) • P j(m) is calculated, and a result is stored in Cor.Q) (step S207), the register read 
control parameter m is incremented by 1 (step S209), and a decision is made as to whether all the samples have been 
read out to the last sample (step S21 1). If the decision in the step S21 1 is NO, the operation is repeated from the step 
so S203. 

[0072] If the decision in the step S21 1 is YES, the calculation of the correlation coefficient Cor.Q) corresponding to 
PN1j has been finished, and j is incremented by 1 (step S213). Then, a decision is made as to whether j has reached 
N or not (step S215). If j is not equal to N, there still remains a calculation for obtaining correlation coefficients for other 
pseudo-random signal candidates, and the process branches to step S203. 
55 [0073] H j is equal to N, all th - correlation coefficients for the pseudo-random signal candidates have been obtained, 
and a maximum Cor.Q) and the value of this j are obtained from Cor.(0) to Cor.(N-1) (step S217). Then, a decision is 
made as to whether the obtained Cor.Q) is larger than a predetermined decision value (step S219). If this Cor.Q) does 
not exceed the predetermined decision value, the process branches to ERROR processing because some fault is con- 
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sfctered to have occurred. In the ERROR processing, retrial may be carried out by a predetermined number. 

[0074] rf this Cor.® exceeds the predetermined decision value, PN1 n is the pseudo-random signal to be obtained, 

and it is made firm that PN1 n = PN1 j , or the scramble key n = j (step S221), thus finishing the processing. 

[0075] Fig.7 shows a time flow of the processing. At first, a convolution is carried out by utilizing the periodicity of a 

5 pseudo-random signal. For this operation, sufficient time, for example a few seconds (L samples), is necessary to ena- 
ble an embedded signal to be separated from an audio signal. Next the detection of PNa and the detection of phases, 
that is, a synchronous detection are carried out at the same time, rf the length of the pseudo-random signal is M, M cal- 
culations are carried out to obtain M correlation coefficients. Synchronization is established at this time, and 
PN1 n is detected next. At this stage, N calculations are carried out to obtain N correlation coefficients. In 

10 genera), there is a relationship of L » M » N, and the detection time of a 1 -bit embedded signal becomes 
(PN convolution + PNa phase detection) = (PN convolution + PNa phase detection + PN1 n detection) . Therefore, it is 
possible to detect the scramble key n (0 ^ n ^ N-1 ) during a detection time almost the same as the detection time of 1 
bit embedded according to the conventional spectrum <£ffusion technique. 

[0076] According to the above-described first embodiment, at the scrambler side, there are embedded simultaneously 
15 and in parallel into a signal to be processed, a predetermined third pseudo-random signal PNa and a first pseudo-ran- 
dom signal PN1 n selected from a predetermined plurality of pseudo-random signals PN1 0 to PN1 N _i which are in a pre- 
determined phase relationship with PNa. Therefore, at the descrambler side, it is possible to detect easily the phase of 
the pseudo-random signal embedded by detecting a predetermined PNa, and it is also possible to detect easily PN1 n 
based on a detected phase. Accordingly, the volume of calculation for detecting a pseudo-random signal at the 
20 descrambler side is small, with an effect that it is possfcle to reduce time required for obtaining a scramble key. 



[Second embodiment] 

[0077] Fig.8 is a view for showing a concept of embedding and scrambling in a second embodiment of the present 
25 invention. A third pseudo-random signal PNa and a first pseudo-random signal PN1 n are embedded sequentially into 
an audio signal according to a spectrum diffusion technique The second embodiment is different from the first embod- 
iment in that while PNa and PN1 n are embedded at the same time in the first embodiment. PN1 n is embedded after PNa 
has been embedded in the present embodiment The structures of the scrambler and the descrambler of the second 
embodiment are similar to those of the block diagram shown in Rg.3A. 
30 [0078] The third pseudo-random signal PNa is a flag for indicating whether or not a scramble key has been embedded 
into the audio signal, and this is a fixed pseudo-random signal. On the other hand, PN 1 n is one of signals selected from 
a plurality of pseudo-random signals PN1 0 to PNI^. 

[0079] In this case, in embedding these pseudo-random signals, the phases of PNa and PN1 n are set the same or 
are set to have a predetermined phase relationship. To each of the pseudo-random signals PN1 0 to PN1 , N scramble 

, . 35_„ keys 0. to N-1 are set to correspond in one to one relationship. Accordingly,^ scramble key n corresponds to PN1 n . 

[0080] The audio signal is scrambled by this scramble key n. There are various methods of scrambling. For example, 
there has been known a method for generating a second pseudo-random signal PN2 n based on the scramble key n to 
shuffle the audio signal by this pseudo-random signal PN2 n or to scramble the audio signal by this pseudo-random sig- 
nal PN2n. The audio signal becomes a noise signal by the scrambling, and it is difficult to listen to this audio signal 
40 unless this is descrambled. Thus, it becomes possible to hide the contents of the audio signal. The scrambled audio 
signal embedded with the scramble key is recorded onto a recording medium or is transmitted through a transmission 
path. 

[0081] In the descrambler 31 , the scramble key embedded into the audio signal is detected at first For detecting the 
scramble key, at first there is detected the fixed pseudo-random signal PNa for shewing whether a scramble key has 

45 been embedded or not. The audio signal and assumed PNa are correlated to detect the fixed pseudo-random signal 
PNa. Correlation calculation is carried for all the conceivable phases, and the phase having the highest correlation coef- 
ficient is established as the phase of PNa. Once the phase of PNa has been established, PN1 n is detected next. If the 
phase of PNa is known, the phase of PN1 n is also known based on the conditions at the time of the embedefing. There- 
fore, it is not necessary to carry out a processing for establishing the phase of PN1 n in detecting PN1 n . However, since 

so n of PN1 n is not known, it is necessary to carry out correlation for all the potential N pseudo-random signals of PN1 0 to 
PN1 N . t , and a most certain PN1 n is specif ied. 

[0082] Accorcfing to the present embodiment since PNa and PN1 n are embedded sequentially, a longer period is 
required for the embedding than the period required in the first embodiment However, since only one pseudo-random 
signal is embedded at any time, influence to the audio signal can be minimized. Further, howling of sound quality at the 
55 time of reproduction can be mor reduced as compared with the first embodiment. 
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[Third embodiment] 

[0083] A block diagram for showing the configuration of a third embodiment is the same as Fig.2A. In the present 
embodiment, a third pseudo-random signal PNa used in the first and second embodiments is not used. Instead, only 
s PN1 n selected from a plurality of pseudo-random signals PN1 0 to PN1 N -i is embedded into an audio signal. 

[0084] In this case, to each of N pseudo-random signals PN1 0 to PN1 ^ , N scramble keys 0 to N-1 are set to corre- 
spond in one to one relationships Accordingly, a scramble key n corresponds to PN1 n . The scrambler 1 scrambles the 
audio signal with this scramble key n. 

[0085] There are various methods of scrambling. For example, there has been known a method for generating a sec- 
10 ond pseudo-random signal PN2,, based on the scramble key n to shuffle the audio signal by this pseudo-random signal 

PN2 n or to scramble the aucfio signal by this pseudo-random signal PN2 n . The audio signal becomes a noise signal by 

the scrambling, and it is difficult to listen to this audio signal unless this is descrambled. It also becomes possible to hide 

the contents of the audio signal. The scrambled audio signal embedded with the scramble key is recorded onto a 

recording medium or is transmitted through a transmission path. 
75 [0086] In the descramWer 31. it is necessary to check whether all the candidates of PN1 n have been embedded or 

not It is also necessary to check phases of all the candidates. Therefore, many calculations must be carried out for 

phase detection as compared with the first embodiment 

[0087] However, there is required only one pseudo-random signal to be embedded, and it becomes possible to min- 
imize the influence of howling of the audio signal. Further, despite the fact that more time is required for detecting a 
20 scramble key, the period required for embedding the scramble key is the same as the period necessary for detecting 
one pseudo-random signal, which is the same as the first embodiment 

[0088] Description has been made of the embodiments in the above in which the present invention is applied to an 
audio signal. However, these do not limit the present invention. For example, the present invention can also be applied 
to a video signal as contents. The invention can be applied to both cases where the contents are transmitted through a 
25 cable/radio communication channel and where the contents are recorded onto a recording medium for distribution. 
[0089] As explained above, according to the present invention, it is possible to provide a scrambler and a descrambler 
as well as a recording medium capable of embedding a scramble key into such contents as an audio signal or the like 
and capable of detecting this scramble key in a short time. 

[0090] According to the present invention, only one or two pseudo-random signals are embedded, and there is an 
30 effect that the howling of the quality of the contents such as an audio signal or the like can be minimized. 

[0091] In general, scrambling cannot be applied to a portion of the contents where a scramble key is embedded. 
Therefore, it is necessary to embed the scramble key during a short period as far as possibla 
[0092] However, according to the present invention, the embedding of a scramble key having a few bits requires an 
embedding period corresponding to only one bit based on the conventional spectrum diffusion technique. This reduces 

35 a nonzscrambling period. .... 

[0093] Further, the present invention does not require an area on a format for transmitting the scramble key, which 
simplifies the transmission path. Moreover, as the scramble key is also embedded into the contents of the signal, this 
scramble key is not exposed to the transmission path, which increases the security level of security thus ensuring 
safety. 

40 [0094] It should be understood that many modifications and adaptations of the invention will become apparent to 
those skilled in the art and it is intended to encompass such obvious modifications and changes in the scope of the 
claims appended hereto. 

Claims 

45 

1. A scrambler(l), comprising: 

selecting means(3) for selecting a first pseudo-random signal (PN1 J from a predetermined plurality of pseudo- 
random signals based on input key data(n); 
so embedding means(7) for embedding the first pseudo-random signal(PN1 J into an input data signal; 

pseudo-random signal generating means(9) for generating a second pseudo-random signaKPN&n) based on 
thekeydata(n);and 

scrambling means(1 1 ) for scrambling the input data signal by the second pseudo-random signaKPNten) gener- 
ated. 

55 

2. The scrambler(l) according to Claim 1, wherein the embedding means(7) embeds the first pseudo-random sig- 
nal(PN1 J into the input data signal by means of spectrum diffusion. 
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3. A descrambler(31), comprising: 

pseudo-random signal detecting means (33) for detecting, as a first pseudo-random signalfPNI^, one 
pseudo-random signal from a predetermined plurality of pseudo-random signals, embedded into an input data 
signal; 

key data generator(33) for generating key data(n) which is information on the first pseudo-random sig- 
naKPNU 

pseudo-random signal generating means(35) for generating a second pseudo-random signaKPrsEJ based on 
the key data(n); and 

descrambling means(37) for descrambling the input data signal by the second pseudo-random signal(PN2n) 
generated. 

4. The descrambler(31) according to Ciaim 3, further comprising reference pseudo-random signal generating 
means(55) for generating a plurality of reference pseudo-random signals, 

wherein the pseudo-random signal detecting means(33) detects the first pseudo-random signalfPNIJ based on 
calculation of correlation coefficients between the plurality of reference pseudo-random signals generated by the 
reference pseudo-random signal generating means(55) and the input data signal. 

5. A recording medium having recorded thereon a data signal into which a first pseudo-random signal(PN1 J selected 
from a predetermined plurality of pseudo-random signals based on input key data(n) has been embedded, said 
data signal also having been scrambled by a second pseudo-random signalfPISEn) generated based on the key 
data(n). 

6. A scrambler(1 ), comprising: 

selecting means(3) for selecting a first pseudo-random signalCPNIJ from a predetermined plurality of pseudo- 
random signals based on input key data(n); 

pseudo-random signal generating means(9) for generating a second pseudo-random signal (PN2J based on 
the keydata(n); 

embedding means(7) for embedding into an input data signal the first pseudo-random signal(PN1 J and a pre- 
determined third pseudo-random signal(PNa) having a predetermined phase relationship with a phase of the 
first pseudo-random signal(PNIn); and 

scrambling means(1 1) for scrambling the input data signal by the second pseudo-random signal^r^ gener- 
ated. 

7. The scrambled 1) according to Claim 6, wherein the embedding means(7) embeds the first pseudo-random sig- 
nal(PN1n) and the third pseudo-random signal(PNa) into the input data signal during the same period. 

8- The scrambler(l) according to Claim 6, wherein the embedding means(7) embeds the first pseudo-random sig- 
nal(PN1„) and the third pseudo-random signal(PNa) into the input data signal during different periods. 

9. The scrambler(l) according to Claim 6, wherein the embedding means(7) embeds the first pseudo-random sig- 
naKPNIn) and the third pseudo-random signal(PNa) into the input data signal by means of spectrum diffusion. 

10. A descrambler(31), comprising: 

first detecting means(39) for detecting a predetermined third pseudo-random signal(PNa) embedded in 
advance into an input data signal and a phase of the third pseudo-random signaJ(PNa); 
second detecting means(39) for detecting, as a first pseudo-random signal(PN1 „), one pseudo-random signal 
from a predetermined plurality of pseudo-random signals, embedded into the input data signal, based on the 
phase of the third pseudo-random signal(PNa) detected; 

key data generating means(39) for generating key data(n) which is information on the first pseudorandom sig- 
naltPNU; 

pseudo-random signal generating means(35) for generating a second pseudo-random signaI(PN2n) based on 
the keydata(n);and 

descrambling means (37) for descrambling the input data signal by the second pseudo random signal(PN2n) 
generated. 
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11. The descramWer(31) according to Claim 10, further comprising reference pseudo-random signal generating 
means(55) for generating a plurality of reference pseudo-random signals, 

wherein the first detecting means(39) and the second detecting means(39) detect respectively the third pseudo- 
random signal(PNa) and the phase thereof and the first pseudo-random signal (PNI^, based on calculation of cor- 
relation coefficients between the plurality of reference pseudo-random signals generated by the referenc pseudo- 
random signal generating means(55) and the input data signal. 

12. A recording medium having recorded thereon a data signal into which a first pseudo-random signaI(PN1 J selected 
from a predetermined plurality of pseudo-random signals based on input key data(n) and a predetermined third 
pseudo-random signal(PNa) having a predetermined phase relationship with a phase of the first pseudo-random 
signal(PN1 „) have been embedded, said data signal also having been scrambled by a second pseudo-random sig- 
nal(PN2n) generated based on the key data(n). 
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